topic Search EDLs in General Topics

Search EDLs

MikeSangray2019 — Fri, 14 Feb 2020 14:33:21 GMT

Is there a way to search my current EDLs for an IP?

OtakarKlier — Fri, 14 Feb 2020 17:46:38 GMT

Hello,

Should be able to: Click Objects -> External Dynamic Lists -> open the one then click on the 'List Entries and Exceptions'.

Unfortunately you'll have to do it for each one you have configured, however the search parameter stays while switching.

Regards,

MikeSangray2019 — Fri, 14 Feb 2020 19:53:02 GMT

The EDL entries aren't part of the exportable config via the api and if the IP isn't part of an event it won't show in a SIEM.

It does look like you can generate a list using the CLI via 'request system external-list show' so that might be an option for a script or a report?